$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft File: DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json) Hash identifier: i9eEJXKAgHwblvLekbi7WzckUL2vEegJvRzfBoN+6YM= Subject key identifier: 1F:BE:C6:30:13:FF:00:F3:59:EB:91:CD:6F:4C:0E:F3:2A:BF:9C:62 Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft Manifest number: 65 Signing time: Sun 01 Mar 2026 09:35:38 +0000 Manifest this update: Sun 01 Mar 2026 09:35:38 +0000 Manifest next update: Sun 08 Mar 2026 09:35:38 +0000 Files and hashes: 1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: HGdjqJFgyXKlK3IRd7YHo6AqfhE/sCwtFdgKaPaoLrM=) 2: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: IiWhGRsjXczChP0MmoTW9Pkoc+QqwLTQPacvlkuiXu8=) 3: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: 4kagDiDwOK9DDKuYrOZLBx4t6wG2YIBPDsR0s/PYy+4=) 4: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: pfN97xtI/DeRbJop2c9X92MygEUcxnLoB0XTR1dIrkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Validity Not Before: Mar 1 09:35:38 2026 GMT Not After : Mar 8 09:35:38 2026 GMT Subject: CN=69a4086a-9c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:68:e9:1e:ab:df:2d:53:af:d1:1a:dc:a3: 84:91:94:c1:46:fe:31:21:e0:db:3f:d4:d0:2b:cf: 16:c3:5d:d2:57:23:f5:dc:6b:ee:99:1f:a0:63:a9: 99:34:04:a5:c0:00:da:37:61:43:f0:e4:1e:ab:38: 4e:4d:26:95:13:25:49:28:1d:d8:77:d4:3b:1d:cd: be:b9:7b:46:5c:47:0d:9e:c4:33:b0:28:eb:c9:e5: 50:34:f5:b0:fa:3b:4b:d3:a3:c9:b4:a6:94:12:f7: c4:cb:df:fc:f9:b8:e8:68:87:8a:a7:80:29:ab:c8: 63:c8:2a:8d:c1:6c:a0:9a:17:f5:37:5b:81:8e:4b: db:f3:43:4f:9a:41:94:a7:e7:d4:e5:bb:ce:a9:07: 93:7a:a2:f5:25:1a:0a:db:31:14:2c:ff:0c:f9:51: 50:72:e4:11:45:bd:31:c4:6a:0c:53:3c:b5:bd:00: 12:d8:79:1d:d0:24:13:0f:f4:64:4e:28:27:f3:7d: 8b:b9:a7:08:9c:ac:98:18:bc:08:5d:9b:56:cc:2f: 4f:f1:5f:68:81:40:af:51:5e:44:77:d5:18:3b:7c: 48:25:ba:e2:5a:31:2c:47:ad:80:f5:48:a8:91:74: f7:b7:4a:65:a8:bf:45:91:0b:dc:18:6b:5f:a1:5d: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:C6:30:13:FF:00:F3:59:EB:91:CD:6F:4C:0E:F3:2A:BF:9C:62 X509v3 Authority Key Identifier: keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:07:c1:04:b5:b1:a1:49:c5:79:af:5f:70:f7:a2:23:b5:7f: 7b:35:dd:9e:f9:c9:80:23:54:28:70:0f:a7:b3:2b:b8:12:63: 1e:86:20:ff:75:ba:79:9d:28:f5:a0:b0:04:3e:87:52:46:c2: e1:fa:df:53:0c:e5:7e:b1:1b:51:0d:d6:54:ac:5c:f6:89:4d: 7f:f6:90:d7:a6:f8:f7:41:aa:f0:dc:9d:a5:8e:a0:35:85:f9: 3b:6e:8c:92:a2:5c:3a:f3:84:ef:ca:9a:01:65:e6:7a:de:bb: dc:6d:cf:91:55:b3:b7:9f:b6:7c:0f:9a:83:3d:9b:a1:01:a2: 25:5c:4a:db:39:2d:79:75:34:3f:5c:4f:da:21:8f:a4:8b:58: 26:92:36:f4:e1:4c:e5:ff:5d:52:9c:a0:e6:06:b1:7d:bb:33: e0:68:bc:3e:97:cb:b4:d3:20:0f:27:0d:58:ae:7b:cd:a1:88: b9:fd:fc:5f:9a:b9:13:f6:3b:67:bc:0f:70:7f:38:67:8f:24: 45:16:83:34:43:25:67:6e:ab:bc:12:ea:20:f0:42:7a:1d:1c: 61:5d:96:93:1d:61:9b:2a:42:68:49:ef:cf:18:18:db:6b:e1: fc:01:22:9e:76:43:c1:d2:3b:31:f1:5c:e9:0b:10:02:50:d9: a0:0f:58:41 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUQxRjExMC8GA1UEBRMoMENBQjY4RTA2OTA4M0E0Mzg4RThGQzY5NzU4RjA0NTk2 MkZEMDFBRjAeFw0yNjAzMDEwOTM1MzhaFw0yNjAzMDgwOTM1MzhaMBgxFjAUBgNV BAMTDTY5YTQwODZhLTljNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC54mjpHqvfLVOv0Rrco4SRlMFG/jEh4Ns/1NArzxbDXdJXI/Xca+6ZH6BjqZk0 BKXAANo3YUPw5B6rOE5NJpUTJUkoHdh31Dsdzb65e0ZcRw2exDOwKOvJ5VA09bD6 O0vTo8m0ppQS98TL3/z5uOhoh4qngCmryGPIKo3BbKCaF/U3W4GOS9vzQ0+aQZSn 59Tlu86pB5N6ovUlGgrbMRQs/wz5UVBy5BFFvTHEagxTPLW9ABLYeR3QJBMP9GRO KCfzfYu5pwicrJgYvAhdm1bML0/xX2iBQK9RXkR31Rg7fEgluuJaMSxHrYD1SKiR dPe3SmWov0WRC9wYa1+hXQOLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUH77GMBP/ APNZ65HNb0wO8yq/nGIwHwYDVR0jBBgwFoAUDKto4GkIOkOI6PxpdY8EWWL9Aa8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RDFGL0FEMjAyMUE0OTc3 NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFh OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREt0bzRHa0lPa09JNlB4cGRZOEVXV0w5QWE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RDFGL0FEMjAyMUE0OTc3NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tP STZQeHBkWThFV1dMOUFhOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhB8EEtbGhScV5r19w96IjtX97Nd2e+cmAI1QocA+nsyu4EmMehiD/dbp5nSj1 oLAEPodSRsLh+t9TDOV+sRtRDdZUrFz2iU1/9pDXpvj3Qarw3J2ljqA1hfk7boyS olw684TvypoBZeZ63rvcbc+RVbO3n7Z8D5qDPZuhAaIlXErbOS15dTQ/XE/aIY+k i1gmkjb04Uzl/11SnKDmBrF9uzPgaLw+l8u00yAPJw1YrnvNoYi5/fxfmrkT9jtn vA9wfzhnjyRFFoM0QyVnbqu8Euog8EJ6HRxhXZaTHWGbKkJoSe/PGBjba+H8ASKe dkPB0jsx8VzpCxACUNmgD1hB -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:20 2026 by rpki-client